Information Security Governance, Risk & Compliance (GRC) Analyst

Placements24; Polokwane; Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Medical aid

Retirement fund

Professional development

Hybrid work arrangement

Job summary

Placements24 is seeking an Information Security GRC Analyst to join our client in Polokwane. The role blends on-site engagement with remote flexibility and focuses on developing and maintaining a robust GRC program, risk assessments, and policy management.

The ideal candidate has a Bachelor’s degree in IT/CS/Law, at least 4 years in information security with GRC, knowledge of ISO 27001/NIST/COBIT, and relevant certifications are highly desirable.

Qualifications

• Bachelor's degree in IT/CS/Law or related field.
• At least 4 years information security with a focus on GRC.
• Knowledge of ISO 27001, NIST, COBIT.
• Experience with risk assessments and compliance management.
• Certifications like CISA, CRISC, CISSP or CISM are desirable.

Responsibilities

• Develop and manage the information security GRC program.
• Ensure compliance with regulations and standards (POPIA, GDPR if applicable, ISO 27001).
• Conduct information security risk assessments and maintain a risk register.
• Develop, review and update information security policies, standards, and procedures.
• Coordinate internal and external security audits.
• Respond to regulatory inquiries and assist with compliance reporting.
• Promote security awareness and provide GRC training.
• Monitor regulatory changes and update the GRC program.

Skills

GRC frameworks

Risk management

Security best practices

Communication skills

Report writing

Education

Bachelor's degree in IT/CS/Law or related field

Job description

About the Role

Our client, a prominent player in the telecommunications sector, is seeking an Information Security GRC Analyst to join their team in Polokwane. This hybrid role provides a great opportunity to contribute to the security and compliance efforts of the organization, offering a mix of on-site engagement and remote flexibility. You will be responsible for developing, implementing, and maintaining the company's information security GRC program. This includes ensuring compliance with regulatory requirements, conducting risk assessments, managing security policies, and supporting internal and external audits. The ideal candidate will have a strong understanding of GRC frameworks, risk management principles, and cybersecurity best practices. This role requires excellent analytical, communication, and documentation skills to effectively collaborate with various stakeholders across the business. Join us in Polokwane and play a vital role in strengthening our security and compliance posture.

Key Responsibilities

• Develop, implement, and manage the information security GRC program.
• Ensure compliance with relevant industry regulations and standards (e.g., POPIA, GDPR if applicable, ISO 27001).
• Conduct information security risk assessments and maintain a risk register.
• Develop, review, and update information security policies, standards, and procedures.
• Manage and coordinate internal and external security audits.
• Respond to regulatory inquiries and facilitate compliance reporting.
• Promote security awareness and provide training on GRC matters.
• Monitor regulatory changes and update the GRC program accordingly.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Law, or a related field.
• Minimum of 4 years of experience in information security, focusing on GRC functions.
• In-depth knowledge of GRC frameworks such as ISO 27001, NIST, COBIT.
• Experience with risk assessment methodologies and compliance management.
• Familiarity with data privacy regulations.
• Strong understanding of information security principles and controls.
• Excellent written and verbal communication skills, with strong report-writing capabilities.
• Relevant certifications like CISA, CRISC, CISSP, or CISM are highly desirable.

Benefits

• Our client offers a competitive salary, medical aid, retirement fund, professional development opportunities, and a flexible hybrid work arrangement in Polokwane.